This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft File: ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json) Hash identifier: qjL8MNsWJGSpsp7bqu/QVprkuS0lxQJly7aAvLOjSzI= Subject key identifier: F1:5E:40:DE:46:54:11:95:54:05:A3:DA:F9:CF:05:CC:38:47:C9:B3 Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D Certificate issuer: /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d Certificate serial: 019C4210027F39802AD0AAEB1EA524F07BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft Manifest number: 1718 Signing time: Mon 09 Feb 2026 11:01:11 +0000 Manifest this update: Mon 09 Feb 2026 11:01:11 +0000 Manifest next update: Tue 10 Feb 2026 11:01:11 +0000 Files and hashes: 1: OAIvzsBtuFZey51F26GoFlgIcXk.roa (hash: RrRzXT/cIeb31Wmixj2eJEHKu80nNaBp4OOEc3gjdd4=) 2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: NVNXtWLl/YaahF9v60IeEyuC3QTPxlG2bUqU84Bs094=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:02:7f:39:80:2a:d0:aa:eb:1e:a5:24:f0:7b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d Validity Not Before: Feb 9 11:01:11 2026 GMT Not After : Feb 10 11:01:11 2026 GMT Subject: CN=f15e40de465411955405a3daf9cf05cc3847c9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:97:65:b1:33:64:66:3f:0d:83:40:5e:e5: 2c:e5:00:be:5a:d5:74:1d:4d:2e:6f:b2:b3:87:45: 55:d3:2a:41:d0:a4:09:fb:2e:55:55:18:db:42:b3: f0:58:0b:1d:ad:bb:37:84:49:64:51:d2:cb:b8:c2: 34:fe:38:66:60:64:73:d0:73:ba:29:c1:d9:b4:7f: 47:33:f9:b8:0d:b7:f8:9a:30:0c:e6:db:3f:6d:da: ef:69:d8:68:e5:5d:e1:0f:23:e9:2c:30:91:c1:f2: 8b:d8:bb:f8:1e:28:30:c2:b2:38:a8:d3:b8:86:65: 18:c4:b3:ec:15:b5:92:13:73:e2:e7:f1:fa:76:61: 29:4e:30:ea:2e:55:41:35:2c:11:3d:ba:c2:14:5a: d9:ee:ff:a6:ab:59:37:7d:43:3f:33:c6:41:d4:e0: fb:0b:f7:84:69:89:70:24:2c:f6:2f:fe:ce:3d:5a: 44:3c:bc:58:f8:43:dd:e7:09:b4:4a:9f:f3:8e:a1: ce:91:d3:68:cf:83:d4:46:58:2e:fb:36:a5:ba:00: 2e:35:fd:4d:b8:b5:84:f4:37:0d:fe:f8:69:97:c2: b3:ca:21:17:c8:f4:0a:80:85:93:35:f9:a3:df:70: 45:d0:eb:25:d4:12:3b:c9:08:2d:27:14:d3:40:5d: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:40:DE:46:54:11:95:54:05:A3:DA:F9:CF:05:CC:38:47:C9:B3 X509v3 Authority Key Identifier: keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:82:86:ee:42:f3:12:81:78:da:e9:ec:ef:ff:d6:f7:61:cf: 1e:bd:40:67:2d:a2:b1:0e:c5:b8:b2:b8:73:de:d9:15:8a:a7: b9:43:03:ca:dc:23:96:47:ce:61:b0:69:36:2e:8c:8c:15:bb: 59:23:6f:33:88:d0:e7:76:d6:41:39:60:95:bf:80:c2:ce:c7: 7a:fd:88:bc:9d:53:34:b2:c6:e0:7c:20:0e:6b:70:c5:a0:53: 46:49:02:67:25:4a:f7:50:c3:0d:3f:e7:60:dd:05:04:d2:bb: 2e:3e:30:ba:dd:7f:e5:f9:0b:7c:44:05:07:2a:f7:ef:96:9d: 32:e1:56:74:21:42:70:90:55:04:43:76:b8:5c:dc:44:6f:4c: ef:23:1f:f6:1f:6e:50:dd:8e:bb:97:d8:b2:c7:ca:10:b3:7d: 7f:9c:00:76:30:fa:35:26:a5:28:1f:58:bb:cd:a6:48:02:14: 31:6a:c2:b1:d3:08:65:2e:2b:00:24:12:c1:2e:52:ba:4e:e9: 3d:d4:6f:44:db:22:2e:04:22:5f:e4:ce:d9:27:4a:b3:ca:a9: d1:ea:81:1c:04:0c:9a:79:e9:b7:18:7e:5d:ff:76:cb:be:1d: f2:9a:0a:26:c4:dc:e6:08:e8:78:13:de:e5:48:92:c6:4d:6d: 37:1f:c2:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAJ/OYAq0KrrHqUk8HvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzUzMGI0ZmE4ODk5YTMwYmIyZTY1YjkzZjAxMTlmZGE5 YmMwNWQwHhcNMjYwMjA5MTEwMTExWhcNMjYwMjEwMTEwMTExWjAzMTEwLwYDVQQD EyhmMTVlNDBkZTQ2NTQxMTk1NTQwNWEzZGFmOWNmMDVjYzM4NDdjOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oqXZbEzZGY/DYNAXuUs5QC+WtV0 HU0ub7Kzh0VV0ypB0KQJ+y5VVRjbQrPwWAsdrbs3hElkUdLLuMI0/jhmYGRz0HO6 KcHZtH9HM/m4Dbf4mjAM5ts/bdrvadho5V3hDyPpLDCRwfKL2Lv4HigwwrI4qNO4 hmUYxLPsFbWSE3Pi5/H6dmEpTjDqLlVBNSwRPbrCFFrZ7v+mq1k3fUM/M8ZB1OD7 C/eEaYlwJCz2L/7OPVpEPLxY+EPd5wm0Sp/zjqHOkdNoz4PURlgu+zalugAuNf1N uLWE9DcN/vhpl8KzyiEXyPQKgIWTNfmj33BF0Osl1BI7yQgtJxTTQF2eDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFeQN5GVBGVVAWj2vnPBcw4R8mzMB8GA1UdIwQY MBaAFGR1MLT6iJmjC7LmW5PwEZ/am8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEt MGU3Y2JiY2M2MmQwLzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEtMGU3Y2JiY2M2MmQw LzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4KG7kLz EoF42uns7//W92HPHr1AZy2isQ7FuLK4c97ZFYqnuUMDytwjlkfOYbBpNi6MjBW7 WSNvM4jQ53bWQTlglb+Aws7Hev2IvJ1TNLLG4HwgDmtwxaBTRkkCZyVK91DDDT/n YN0FBNK7Lj4wut1/5fkLfEQFByr375adMuFWdCFCcJBVBEN2uFzcRG9M7yMf9h9u UN2Ou5fYssfKELN9f5wAdjD6NSalKB9Yu82mSAIUMWrCsdMIZS4rACQSwS5Suk7p PdRvRNsiLgQiX+TO2SdKs8qp0eqBHAQMmnnptxh+Xf92y74d8poKJsTc5gjoeBPe 5UiSxk1tNx/Cxw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:27 2026 by rpki-client